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if) (57) Abstract: A computerised method - and related apparatus, systems, programs for a computer and signals - for securely com- 
O municating an electronic document between high and low security domains. Where the data format of the document is not in a 
O predetermined set of simple data formats (for example bitmap images or ASOT text), the document is automatically converted to a 
^ data format in the set. Optionally a "lossy" transformation may also be applied to further confound attackers. The document is then 
^ conveyed securely to a user sanction function for review and sanction by a human user. Once sanctioned the document is digitally 
^ signed for onward transmission to the recipient Especially for transmission from low domain to high domain, user sanctioning of 
document release may be omitted. 
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